@opendatalabs/personal-server-ts-server 1.13.0 → 1.14.0

package/dist/logging/access-log.d.ts

@@ -1,15 +1,4 @@
-export interface AccessLogEntry {
-    logId: string;
-    grantId: string;
-    builder: string;
-    action: "read" | "write" | "delete";
-    scope: string;
-    timestamp: string;
-    ipAddress: string;
-    userAgent: string;
-}
-export interface AccessLogWriter {
-    write(entry: AccessLogEntry): Promise<void>;
-}
+import type { AccessLogEntry, AccessLogWriter } from "@opendatalabs/personal-server-ts-core/logging/access-log";
+export type { AccessLogEntry, AccessLogWriter };
 export declare function createAccessLogWriter(logsDir: string): AccessLogWriter;
 //# sourceMappingURL=access-log.d.ts.map

package/dist/logging/access-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access-log.d.ts","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAUD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAiBtE"}
+{"version":3,"file":"access-log.d.ts","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EAChB,MAAM,0DAA0D,CAAC;AAElE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;AAUhD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAiBtE"}

package/dist/logging/access-log.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-log.js","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAiBjC,SAAS,qBAAqB,CAAC,YAAoB;IACjD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,KAAqB;YAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,UAAU,OAAO,MAAM,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEzC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"access-log.js","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,SAAS,qBAAqB,CAAC,YAAoB;IACjD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,KAAqB;YAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,UAAU,OAAO,MAAM,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEzC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/storage/question-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"question-store.d.ts","sourceRoot":"","sources":["../../src/storage/question-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,mDAAmD,CAAC;AAgE3D,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GACpB,aAAa,CAsFf"}
+{"version":3,"file":"question-store.d.ts","sourceRoot":"","sources":["../../src/storage/question-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,mDAAmD,CAAC;AAgF3D,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GACpB,aAAa,CAmGf"}

package/dist/storage/question-store.js

@@ -15,12 +15,26 @@ CREATE TABLE IF NOT EXISTS derivative_questions (
   registered_by TEXT NOT NULL,
   status TEXT NOT NULL,
   error TEXT,
+  error_code TEXT,
   created_at TEXT NOT NULL,
   updated_at TEXT NOT NULL,
   last_computed_at TEXT,
   derived_version INTEGER,
   derived_collected_at TEXT
 )`;
+/**
+ * Databases created before the column existed migrate in place. ALTER is
+ * guarded by a pragma check because SQLite has no ADD COLUMN IF NOT EXISTS;
+ * existing rows read back as null (pre-classification failures).
+ */
+function ensureErrorCodeColumn(db) {
+    const columns = db
+        .prepare("PRAGMA table_info(derivative_questions)")
+        .all();
+    if (columns.some((column) => column.name === "error_code"))
+        return;
+    db.exec("ALTER TABLE derivative_questions ADD COLUMN error_code TEXT");
+}
 const CREATE_INDEX_SQL = "CREATE INDEX IF NOT EXISTS idx_derivative_questions_derived_scope ON derivative_questions (derived_scope)";
 // Databases created before the recompute policy existed migrate in place;
 // their registrations keep the old follow-every-change behavior.
@@ -36,6 +50,7 @@ function toRegistration(row) {
         registeredBy: JSON.parse(row.registered_by),
         status: row.status,
         error: row.error,
+        errorCode: row.error_code ?? null,
         createdAt: row.created_at,
         updatedAt: row.updated_at,
         lastComputedAt: row.last_computed_at,
@@ -45,6 +60,7 @@ function toRegistration(row) {
 }
 export function createSqliteQuestionStore(db) {
     db.exec(CREATE_TABLE_SQL);
+    ensureErrorCodeColumn(db);
     db.exec(CREATE_INDEX_SQL);
     const columns = db
         .prepare("PRAGMA table_info(derivative_questions)")
@@ -53,21 +69,25 @@ export function createSqliteQuestionStore(db) {
         db.exec(ADD_RECOMPUTE_COLUMN_SQL);
     }
     const listAll = db.prepare("SELECT * FROM derivative_questions ORDER BY created_at ASC, question_id ASC");
+    // The status route polls list({ derivedScope }) on every reader request;
+    // this is the query idx_derivative_questions_derived_scope exists for.
+    const listByDerivedScope = db.prepare("SELECT * FROM derivative_questions WHERE derived_scope = ? ORDER BY created_at ASC, question_id ASC");
     const getOne = db.prepare("SELECT * FROM derivative_questions WHERE question_id = ?");
     const insertOne = db.prepare(`
     INSERT INTO derivative_questions (
       question_id, derived_scope, source_scopes, question, model, recompute,
-      registered_by, status, error, created_at, updated_at,
+      registered_by, status, error, error_code, created_at, updated_at,
       last_computed_at, derived_version, derived_collected_at
     ) VALUES (
       @question_id, @derived_scope, @source_scopes, @question, @model,
-      @recompute, @registered_by, @status, @error, @created_at, @updated_at,
+      @recompute, @registered_by, @status, @error, @error_code, @created_at, @updated_at,
       @last_computed_at, @derived_version, @derived_collected_at
     )`);
     const updateOne = db.prepare(`
     UPDATE derivative_questions SET
       status = @status,
       error = @error,
+      error_code = @error_code,
       updated_at = @updated_at,
       last_computed_at = @last_computed_at,
       derived_version = @derived_version,
@@ -76,7 +96,10 @@ export function createSqliteQuestionStore(db) {
     const deleteOne = db.prepare("DELETE FROM derivative_questions WHERE question_id = ?");
     return {
         async list(filter) {
-            return listAll.all()
+            const rows = filter?.derivedScope !== undefined
+                ? listByDerivedScope.all(filter.derivedScope)
+                : listAll.all();
+            return rows
                 .map(toRegistration)
                 .filter((registration) => matchesQuestionFilter(registration, filter));
         },
@@ -95,6 +118,7 @@ export function createSqliteQuestionStore(db) {
                 registered_by: JSON.stringify(registration.registeredBy),
                 status: registration.status,
                 error: registration.error,
+                error_code: registration.errorCode,
                 created_at: registration.createdAt,
                 updated_at: registration.updatedAt,
                 last_computed_at: registration.lastComputedAt,
@@ -111,6 +135,7 @@ export function createSqliteQuestionStore(db) {
                 question_id: questionId,
                 status: merged.status,
                 error: merged.error,
+                error_code: merged.errorCode ?? null,
                 updated_at: merged.updatedAt,
                 last_computed_at: merged.lastComputedAt,
                 derived_version: merged.derivedVersion,

package/dist/storage/question-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"question-store.js","sourceRoot":"","sources":["../../src/storage/question-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,qBAAqB,GAItB,MAAM,mDAAmD,CAAC;AAE3D,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;EAgBvB,CAAC;AAEH,MAAM,gBAAgB,GACpB,2GAA2G,CAAC;AAE9G,0EAA0E;AAC1E,iEAAiE;AACjE,MAAM,wBAAwB,GAC5B,yFAAyF,CAAC;AAmB5F,SAAS,cAAc,CAAC,GAAQ;IAC9B,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAa;QACvD,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAyB;QACnE,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,EAAqB;IAErB,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1B,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,EAAE;SACf,OAAO,CAAC,yCAAyC,CAAC;SAClD,GAAG,EAA6B,CAAC;IACpC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;QAC3D,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB,6EAA6E,CAC9E,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB,0DAA0D,CAC3D,CAAC;IACF,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;MASzB,CAAC,CAAC;IACN,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;qCAQM,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAC1B,wDAAwD,CACzD,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,OAAQ,OAAO,CAAC,GAAG,EAAY;iBAC5B,GAAG,CAAC,cAAc,CAAC;iBACnB,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,UAAU;YAClB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAoB,CAAC;YACtD,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,YAAY;YACvB,SAAS,CAAC,GAAG,CAAC;gBACZ,WAAW,EAAE,YAAY,CAAC,UAAU;gBACpC,aAAa,EAAE,YAAY,CAAC,YAAY;gBACxC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC;gBACxD,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC;gBACxD,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,UAAU,EAAE,YAAY,CAAC,SAAS;gBAClC,UAAU,EAAE,YAAY,CAAC,SAAS;gBAClC,gBAAgB,EAAE,YAAY,CAAC,cAAc;gBAC7C,eAAe,EAAE,YAAY,CAAC,cAAc;gBAC5C,oBAAoB,EAAE,YAAY,CAAC,kBAAkB;aACtD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAoB,CAAC;YAC1D,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;YACxD,SAAS,CAAC,GAAG,CAAC;gBACZ,WAAW,EAAE,UAAU;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,gBAAgB,EAAE,MAAM,CAAC,cAAc;gBACvC,eAAe,EAAE,MAAM,CAAC,cAAc;gBACtC,oBAAoB,EAAE,MAAM,CAAC,kBAAkB;aAChD,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,UAAU;YACrB,OAAO,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"question-store.js","sourceRoot":"","sources":["../../src/storage/question-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,qBAAqB,GAKtB,MAAM,mDAAmD,CAAC;AAE3D,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;EAiBvB,CAAC;AAEH;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,EAAqB;IAClD,MAAM,OAAO,GAAG,EAAE;SACf,OAAO,CAAC,yCAAyC,CAAC;SAClD,GAAG,EAA6B,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC;QAAE,OAAO;IACnE,EAAE,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,gBAAgB,GACpB,2GAA2G,CAAC;AAE9G,0EAA0E;AAC1E,iEAAiE;AACjE,MAAM,wBAAwB,GAC5B,yFAAyF,CAAC;AAoB5F,SAAS,cAAc,CAAC,GAAQ;IAC9B,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAa;QACvD,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAyB;QACnE,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAG,GAAG,CAAC,UAAuC,IAAI,IAAI;QAC/D,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,EAAqB;IAErB,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1B,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC1B,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,EAAE;SACf,OAAO,CAAC,yCAAyC,CAAC;SAClD,GAAG,EAA6B,CAAC;IACpC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;QAC3D,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB,6EAA6E,CAC9E,CAAC;IACF,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,kBAAkB,GAAG,EAAE,CAAC,OAAO,CACnC,qGAAqG,CACtG,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB,0DAA0D,CAC3D,CAAC;IACF,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;MASzB,CAAC,CAAC;IACN,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;qCASM,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAC1B,wDAAwD,CACzD,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,IAAI,GACR,MAAM,EAAE,YAAY,KAAK,SAAS;gBAChC,CAAC,CAAE,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAW;gBACxD,CAAC,CAAE,OAAO,CAAC,GAAG,EAAY,CAAC;YAC/B,OAAO,IAAI;iBACR,GAAG,CAAC,cAAc,CAAC;iBACnB,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,UAAU;YAClB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAoB,CAAC;YACtD,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,YAAY;YACvB,SAAS,CAAC,GAAG,CAAC;gBACZ,WAAW,EAAE,YAAY,CAAC,UAAU;gBACpC,aAAa,EAAE,YAAY,CAAC,YAAY;gBACxC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC;gBACxD,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC;gBACxD,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,UAAU,EAAE,YAAY,CAAC,SAAS;gBAClC,UAAU,EAAE,YAAY,CAAC,SAAS;gBAClC,UAAU,EAAE,YAAY,CAAC,SAAS;gBAClC,gBAAgB,EAAE,YAAY,CAAC,cAAc;gBAC7C,eAAe,EAAE,YAAY,CAAC,cAAc;gBAC5C,oBAAoB,EAAE,YAAY,CAAC,kBAAkB;aACtD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAoB,CAAC;YAC1D,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;YACxD,SAAS,CAAC,GAAG,CAAC;gBACZ,WAAW,EAAE,UAAU;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;gBACpC,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,gBAAgB,EAAE,MAAM,CAAC,cAAc;gBACvC,eAAe,EAAE,MAAM,CAAC,cAAc;gBACtC,oBAAoB,EAAE,MAAM,CAAC,kBAAkB;aAChD,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,UAAU;YACrB,OAAO,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ui/ps-lite-debug.js

@@ -110213,6 +110213,7 @@ function parseGrantExpiresAtSeconds(value) {
   const millis = Date.parse(value);
   return Number.isNaN(millis) ? null : Math.floor(millis / 1e3);
 }
+var SENTINEL_GRANT_IDS = /* @__PURE__ */ new Set(["owner", "policy-bypass"]);
 async function verifyDataReadPolicy(input, ports) {
   const available = await ports.runtimeAvailability?.isAvailable();
   if (available === false) {
@@ -110227,6 +110228,12 @@ async function verifyDataReadPolicy(input, ports) {
       reason: "No grantId in authorization payload"
     });
   }
+  if (SENTINEL_GRANT_IDS.has(input.grantId)) {
+    throw new GrantRequiredError({
+      reason: "Reserved grantId",
+      grantId: input.grantId
+    });
+  }
   const grant = await ports.grantVerifier.getGrant(input.grantId);
   if (!grant) {
     throw new GrantRequiredError({
@@ -110234,6 +110241,12 @@ async function verifyDataReadPolicy(input, ports) {
       grantId: input.grantId
     });
   }
+  if (SENTINEL_GRANT_IDS.has(grant.id)) {
+    throw new GrantRequiredError({
+      reason: "Grant resolved to a reserved id",
+      grantId: input.grantId
+    });
+  }
   if (grant.revokedAt !== null) {
     throw new GrantRevokedError({ grantId: grant.id });
   }
@@ -111422,6 +111435,34 @@ function resolveLineageGrantView(authResult) {
   }
   return { grantId };
 }
+function isOwnerView(authResult) {
+  return authResult === void 0 || authResult.grantId === "owner" || authResult.grantId === "policy-bypass";
+}
+function redactEnvelopeForGrantee(envelope) {
+  const { [WRITER_ATTRIBUTION_KEY]: attribution, [LINEAGE_KEY]: storedLineage, ...rest } = envelope.data;
+  if (attribution === void 0 && storedLineage === void 0) {
+    return envelope;
+  }
+  let data = rest;
+  if (storedLineage !== void 0) {
+    if (isBinaryEnvelope(envelope)) {
+      const metadata = data["metadata"];
+      if (metadata !== null && typeof metadata === "object" && !Array.isArray(metadata)) {
+        const { lineage: _consumed, ...metadataRest } = metadata;
+        if (Object.keys(metadataRest).length === 0) {
+          const { metadata: _emptied, ...dataRest } = data;
+          data = dataRest;
+        } else {
+          data = { ...data, metadata: metadataRest };
+        }
+      }
+    } else {
+      const { lineage: _consumed, ...dataRest } = data;
+      data = dataRest;
+    }
+  }
+  return { ...envelope, data };
+}
 async function handlePersonalServerDataRequest(request2, deps, options = {}) {
   return withApiErrors(async () => {
     const url2 = new URL(request2.url);
@@ -111514,6 +111555,16 @@ async function handlePersonalServerDataRequest(request2, deps, options = {}) {
           body: result.body
         });
       }
+      await deps.accessLogWriter.write({
+        logId: deps.createLogId?.() ?? crypto.randomUUID(),
+        grantId: authResult?.grantId ?? "owner",
+        builder: authResult?.builder ?? "unknown",
+        action: "lineage",
+        scope: scopeResult.scope,
+        timestamp: (deps.now ?? (() => /* @__PURE__ */ new Date()))().toISOString(),
+        ipAddress: request2.headers.get("x-forwarded-for") ?? request2.headers.get("x-real-ip") ?? "unknown",
+        userAgent: request2.headers.get("user-agent") ?? "unknown"
+      });
       return jsonResponse({ data: result.data, proof: result.proof });
     }
     if (parts.length !== 1)
@@ -111598,6 +111649,7 @@ async function handlePersonalServerDataRequest(request2, deps, options = {}) {
         }
         return contractErrorResponse(result);
       }
+      const servedEnvelope = isOwnerView(authResult) ? result.envelope : redactEnvelopeForGrantee(result.envelope);
       const logId = deps.createLogId?.() ?? crypto.randomUUID();
       const timestamp = (deps.now ?? (() => /* @__PURE__ */ new Date()))().toISOString();
       const ipAddress = request2.headers.get("x-forwarded-for") ?? request2.headers.get("x-real-ip") ?? "unknown";
@@ -111634,13 +111686,13 @@ async function handlePersonalServerDataRequest(request2, deps, options = {}) {
       }
       const wantsRawContent = url2.searchParams.get("content") === "raw";
       if (wantsRawContent) {
-        if (!isBinaryEnvelope(result.envelope)) {
+        if (!isBinaryEnvelope(servedEnvelope)) {
           return jsonResponse({
             error: "NOT_BINARY_SCOPE",
             message: `Scope "${scopeResult.scope}" does not expose raw binary content.`
           }, { status: 400, headers });
         }
-        const decoded = decodeBinaryEnvelope(result.envelope);
+        const decoded = decodeBinaryEnvelope(servedEnvelope);
         headers["Content-Type"] = decoded.mimeType;
         headers["Content-Length"] = String(decoded.bytes.length);
         if (decoded.filename) {
@@ -111655,7 +111707,7 @@ async function handlePersonalServerDataRequest(request2, deps, options = {}) {
         });
         return response2;
       }
-      const response = jsonResponse(result.envelope, { headers });
+      const response = jsonResponse(servedEnvelope, { headers });
       reportReadFulfillment();
       return response;
     }
@@ -113991,6 +114043,7 @@ function questionRegistrationView(registration) {
     registeredBy: registration.registeredBy,
     status: registration.status,
     error: registration.error,
+    errorCode: registration.errorCode,
     createdAt: registration.createdAt,
     updatedAt: registration.updatedAt,
     lastComputedAt: registration.lastComputedAt,
@@ -114003,6 +114056,8 @@ function questionRegistrationView(registration) {
 function clone2(registration) {
   return {
     ...registration,
+    // Registrations persisted before the field existed load as null.
+    errorCode: registration.errorCode ?? null,
     sourceScopes: [...registration.sourceScopes],
     registeredBy: { ...registration.registeredBy }
   };
@@ -114189,6 +114244,7 @@ async function createQuestionRegistration(input) {
     registeredBy: input.registeredBy,
     status: "pending",
     error: null,
+    errorCode: null,
     createdAt: at3,
     updatedAt: at3,
     lastComputedAt: null,
@@ -114267,10 +114323,13 @@ function trimSourceData(data, options = {}) {
     if (Array.isArray(data))
       return trimArray(data, limit2);
     if (isRecord5(data)) {
+      const stamped = "$lineage" in data;
       const out = {};
       for (const [key, value] of Object.entries(data)) {
         if (RESERVED_KEYS.has(key))
           continue;
+        if (stamped && key === "lineage")
+          continue;
         out[key] = Array.isArray(value) ? trimArray(value, limit2) : value;
       }
       return out;
@@ -114564,11 +114623,25 @@ async function withRetries(deps, attempt, retryable) {
   }
 }
 var ComputeFailure = class extends Error {
-  constructor(message) {
+  code;
+  constructor(message, code) {
     super(message);
     this.name = "ComputeFailure";
+    this.code = code;
   }
 };
+function classifyComputeError(err2) {
+  if (err2 instanceof ComputeFailure)
+    return err2.code ?? "internal";
+  if (err2 instanceof InferenceRequestError) {
+    return isRetryableInferenceError(err2) ? "inference_unavailable" : "internal";
+  }
+  if (err2 instanceof ProtocolError) {
+    const grantShaped = err2.errorCode === "DERIVATIVE_SOURCE_NOT_GRANTED" || err2.errorCode === "SCOPE_MISMATCH" || err2.errorCode === "UNREGISTERED_BUILDER" || err2.errorCode.startsWith("GRANT_");
+    return grantShaped ? "grant_invalid" : "internal";
+  }
+  return "internal";
+}
 function shortError(err2) {
   if (err2 instanceof ComputeFailure)
     return err2.message;
@@ -114653,10 +114726,10 @@ async function loadSource(deps, scope) {
   const entry = deps.storage.findEntry({ scope });
   const deletion = await resolveReadDeletion({ scopeDeletions: deps.scopeDeletions, serverOwner: deps.serverOwner }, scope, entry);
   if (deletion) {
-    throw new ComputeFailure(`source scope ${scope} is deleted`);
+    throw new ComputeFailure(`source scope ${scope} is deleted`, "source_missing");
   }
   if (!entry) {
-    throw new ComputeFailure(`source scope ${scope} has no local data`);
+    throw new ComputeFailure(`source scope ${scope} has no local data`, "source_missing");
   }
   let envelope;
   try {
@@ -114792,6 +114865,7 @@ async function computeQuestion(questionId, deps) {
     const updated = await deps.store.update(questionId, {
       status: "ready",
       error: null,
+      errorCode: null,
       updatedAt: computedAt,
       lastComputedAt: computedAt,
       derivedVersion: entry?.version ?? null,
@@ -114829,28 +114903,49 @@ async function computeQuestion(questionId, deps) {
     };
   } catch (err2) {
     const error51 = shortError(err2);
+    const errorCode = classifyComputeError(err2);
     const at3 = now().toISOString();
     const updated = await deps.store.update(questionId, {
       status: "failed",
       error: error51,
+      errorCode,
       updatedAt: at3
     });
     deps.logger?.warn?.({ questionId, derivedScope: registration.derivedScope, error: error51 }, "Derivative question compute failed");
     return {
       status: "failed",
-      registration: updated ?? { ...registration, status: "failed", error: error51 },
+      registration: updated ?? {
+        ...registration,
+        status: "failed",
+        error: error51,
+        errorCode
+      },
       error: error51
     };
   }
 }
 
 // ../core/dist/derivatives/scheduler.js
+var DEFAULT_RETRY_DELAYS_MS2 = [6e4, 3e5, 18e5];
+function isRuntimeSkipOutcome(outcome) {
+  if (typeof outcome !== "object" || outcome === null)
+    return false;
+  const shaped = outcome;
+  return shaped.status === "skipped" && shaped.reason === "runtime-unavailable";
+}
+function isTransientFailureOutcome(outcome) {
+  if (typeof outcome !== "object" || outcome === null)
+    return false;
+  const shaped = outcome;
+  return shaped.status === "failed" && shaped.registration?.errorCode === "inference_unavailable";
+}
 var defaultTimers = {
   setTimeout: (callback, ms3) => setTimeout(callback, ms3),
   clearTimeout: (handle) => clearTimeout(handle)
 };
 function createRecomputeScheduler(options) {
   const debounceMs = options.debounceMs ?? 5e3;
+  const retryDelaysMs = options.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS2;
   const timers = options.timers ?? defaultTimers;
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   const states = /* @__PURE__ */ new Map();
@@ -114869,7 +114964,15 @@ function createRecomputeScheduler(options) {
   function stateFor(questionId) {
     let state = states.get(questionId);
     if (!state) {
-      state = { timer: null, running: null, rerun: false };
+      state = {
+        timer: null,
+        running: null,
+        rerun: false,
+        retryAttempts: 0,
+        retryAtMs: null,
+        retryScheduled: false,
+        retryRunning: false
+      };
       states.set(questionId, state);
     }
     return state;
@@ -114882,17 +114985,42 @@ function createRecomputeScheduler(options) {
       state.rerun = true;
       return;
     }
-    state.running = track(Promise.resolve().then(() => options.compute(questionId)).then(() => void 0, (err2) => warn({
-      questionId,
-      error: err2 instanceof Error ? err2.name : String(err2)
-    }, "Derivative compute threw")).then(async () => {
+    state.running = track(Promise.resolve().then(() => options.compute(questionId)).then((outcome) => outcome, (err2) => {
+      warn({
+        questionId,
+        error: err2 instanceof Error ? err2.name : String(err2)
+      }, "Derivative compute threw");
+      return void 0;
+    }).then(async (outcome) => {
       state.running = null;
+      state.retryAtMs = null;
+      state.retryRunning = false;
+      const retryable = isTransientFailureOutcome(outcome) || // A runtime-unavailable skip DURING a chain consumes an attempt
+      // instead of ending the chain; on a fresh compute it keeps the
+      // pre-retry behavior (pending/stale, reswept by start()).
+      isRuntimeSkipOutcome(outcome) && state.retryAttempts > 0;
       if (state.rerun) {
         state.rerun = false;
+        state.retryAttempts = 0;
         await markStale(questionId);
         schedule(questionId, 0);
-      } else if (!states.get(questionId)?.timer) {
-        states.delete(questionId);
+      } else if (retryable && // A pending timer means a source change or explicit recompute
+      // arrived during the run and already scheduled a fresher run;
+      // replacing its 5s debounce with a 60s retry would delay the
+      // recompute of data this compute never saw.
+      state.timer === null && // After stop() nothing may be scheduled; without this a compute
+      // that settles late would record a retryAtMs no timer backs.
+      !stopped && state.retryAttempts < retryDelaysMs.length) {
+        const delayMs = retryDelaysMs[state.retryAttempts];
+        state.retryAttempts += 1;
+        state.retryAtMs = now().getTime() + delayMs;
+        schedule(questionId, delayMs);
+        state.retryScheduled = true;
+      } else {
+        state.retryAttempts = 0;
+        if (!states.get(questionId)?.timer) {
+          states.delete(questionId);
+        }
       }
     }));
   }
@@ -114904,6 +115032,9 @@ function createRecomputeScheduler(options) {
       timers.clearTimeout(state.timer);
     state.timer = timers.setTimeout(() => {
       state.timer = null;
+      state.retryAtMs = null;
+      state.retryRunning = state.retryScheduled;
+      state.retryScheduled = false;
       run(questionId);
     }, delayMs);
   }
@@ -114914,11 +115045,29 @@ function createRecomputeScheduler(options) {
     if (registration.status === "ready" || registration.status === "failed") {
       await options.store.update(questionId, {
         status: "stale",
+        // The reader contract says errorCode is null unless failed; a stale
+        // question is a recompute in progress, not a terminal failure.
+        errorCode: null,
         updatedAt: now().toISOString()
       });
     }
   }
+  function resetRetry(questionId) {
+    const state = states.get(questionId);
+    if (!state)
+      return;
+    state.retryAttempts = 0;
+    state.retryAtMs = null;
+    state.retryScheduled = false;
+  }
   return {
+    nextRetryAt(questionId) {
+      const retryAtMs = states.get(questionId)?.retryAtMs;
+      return retryAtMs == null ? null : new Date(retryAtMs).toISOString();
+    },
+    retryInFlight(questionId) {
+      return states.get(questionId)?.retryRunning ?? false;
+    },
     markSourceChanged(scope, opts) {
       if (stopped)
         return;
@@ -114933,6 +115082,7 @@ function createRecomputeScheduler(options) {
             continue;
           }
           await markStale(registration.questionId);
+          resetRetry(registration.questionId);
           schedule(registration.questionId, debounceMs);
         }
       })().catch((err2) => warn({ scope, error: err2 instanceof Error ? err2.name : String(err2) }, "Could not mark derivative questions stale")));
@@ -114943,7 +115093,10 @@ function createRecomputeScheduler(options) {
       void track(markStale(questionId).catch((err2) => warn({
         questionId,
         error: err2 instanceof Error ? err2.name : String(err2)
-      }, "Could not mark derivative question stale")).then(() => schedule(questionId, opts?.immediate ? 0 : debounceMs)));
+      }, "Could not mark derivative question stale")).then(() => {
+        resetRetry(questionId);
+        schedule(questionId, opts?.immediate ? 0 : debounceMs);
+      }));
     },
     async whenIdle() {
       const waitForTimers = !options.timers;
@@ -114963,6 +115116,9 @@ function createRecomputeScheduler(options) {
         if (state.timer !== null)
           timers.clearTimeout(state.timer);
         state.timer = null;
+        state.retryAttempts = 0;
+        state.retryAtMs = null;
+        state.retryScheduled = false;
       }
     },
     start() {
@@ -114983,6 +115139,7 @@ function createRecomputeScheduler(options) {
 
 // ../core/dist/derivatives/api.js
 var MAX_QUESTION_BODY_BYTES = 16 * 1024;
+var RETRY_IN_FLIGHT_POLL_SECONDS = 5;
 function jsonResponse3(body, init) {
   const headers = new Headers(init?.headers);
   headers.set("Content-Type", "application/json");
@@ -115035,12 +115192,63 @@ async function loadForCaller(deps, request2, store, questionId) {
   }
   return { registration, writer };
 }
+async function handleStatusRoute(request2, url2, deps, store, scheduler, now) {
+  if (request2.method !== "GET") {
+    return errorResponse2(405, "METHOD_NOT_ALLOWED", "Method not allowed");
+  }
+  const derivedScopeParam = url2.searchParams.get("derivedScope");
+  if (!derivedScopeParam) {
+    throw new DerivativeDerivedScopeRequiredError();
+  }
+  const scopeResult = parseDataScopeContract(derivedScopeParam);
+  if (!scopeResult.ok) {
+    return errorResponse2(scopeResult.status, scopeResult.body.error, scopeResult.body.message);
+  }
+  const derivedScope = scopeResult.scope;
+  const auth = await deps.auth.authorizeBuilderRead({
+    request: request2,
+    scope: derivedScope,
+    grantId: selectedGrantId(request2, url2)
+  }) ?? void 0;
+  const registrations = await store.list({ derivedScope });
+  if (registrations.length === 0) {
+    throw new DerivativeQuestionNotFoundError({ derivedScope });
+  }
+  const STATUS_PRECEDENCE = {
+    ready: 0,
+    stale: 1,
+    pending: 2,
+    failed: 3
+  };
+  const registration = registrations.reduce((best, candidate) => {
+    const byStatus = STATUS_PRECEDENCE[candidate.status] - STATUS_PRECEDENCE[best.status];
+    if (byStatus !== 0)
+      return byStatus < 0 ? candidate : best;
+    return candidate.updatedAt >= best.updatedAt ? candidate : best;
+  });
+  const nextRetryAt = scheduler.nextRetryAt?.(registration.questionId) ?? null;
+  const retryAfterSeconds = nextRetryAt !== null ? Math.max(1, Math.ceil((Date.parse(nextRetryAt) - now().getTime()) / 1e3)) : scheduler.retryInFlight?.(registration.questionId) ? RETRY_IN_FLIGHT_POLL_SECONDS : null;
+  const registrarView = auth === void 0 || auth.grantId === "owner" || auth.grantId === "policy-bypass" || registration.registeredBy.kind === "builder" && typeof auth.builder === "string" && sameBuilder(registration.registeredBy.builder, auth.builder);
+  const disclosedErrorCode = registration.errorCode === "grant_invalid" && !registrarView ? "internal" : registration.errorCode;
+  return jsonResponse3({
+    derivedScope: registration.derivedScope,
+    status: registration.status,
+    lastComputedAt: registration.lastComputedAt,
+    derivedVersion: registration.derivedVersion,
+    derivedCollectedAt: registration.derivedCollectedAt,
+    // Null unless failed, whatever an old store row holds: a stale question
+    // is a recompute in progress, not a terminal failure.
+    errorCode: registration.status === "failed" ? disclosedErrorCode : null,
+    retryAfterSeconds
+  });
+}
 async function handlePersonalServerDerivativesRequest(request2, deps, options = {}) {
   try {
     const url2 = new URL(request2.url);
     const pathname = stripBasePath2(url2.pathname, options.basePath);
     const parts = pathname.split("/").filter(Boolean);
-    if (parts[0] !== "questions" || parts.length > 3) {
+    const isStatusRoute = parts[0] === "status" && parts.length === 1;
+    if (!isStatusRoute && (parts[0] !== "questions" || parts.length > 3)) {
       return errorResponse2(404, "NOT_FOUND", "Not found");
     }
     const compute = deps.compute;
@@ -115048,6 +115256,9 @@ async function handlePersonalServerDerivativesRequest(request2, deps, options =
       throw new DerivativeComputeUnavailableError();
     const { store, scheduler } = compute;
     const now = deps.now ?? (() => /* @__PURE__ */ new Date());
+    if (isStatusRoute) {
+      return await handleStatusRoute(request2, url2, deps, store, scheduler, now);
+    }
     if (parts.length === 1) {
       if (request2.method === "GET") {
         const derivedScope = url2.searchParams.get("derivedScope") ?? void 0;
@@ -115719,6 +115930,140 @@ function createInMemoryMcpOAuthAuthorizationStore() {
 }
 
 // ../core/dist/mcp/read-client.js
+var FAIL_CLOSED_CONTEXT = {
+  dropTopLevelLineage: true,
+  dropMetadataLineage: true
+};
+function pathUnder(path, prefix) {
+  return path === prefix || path.startsWith(prefix) && /[.[{]/.test(path.charAt(prefix.length));
+}
+function groupLabelSegments(path) {
+  const match = /^\$\.data(?:\.metadata)?\.\{(.+):(.+)\}$/.exec(path);
+  return match ? [match[1], match[2]] : [];
+}
+function servedLineageShaped(blocks) {
+  return blocks.some((block) => {
+    if (pathUnder(block.path, "$.data.lineage") || pathUnder(block.path, "$.data.metadata.lineage")) {
+      return true;
+    }
+    if (groupLabelSegments(block.path).some((segment) => segment === "lineage" || segment === LINEAGE_KEY)) {
+      return true;
+    }
+    if (!("value" in block) || !isPlainObject3(block.value))
+      return false;
+    const data = block.path === "$" ? block.value["data"] ?? null : block.value;
+    return isPlainObject3(data) && ("lineage" in data || isPlainObject3(data["metadata"]) && "lineage" in data["metadata"]);
+  });
+}
+function visibleStampEvidence(blocks) {
+  for (const block of blocks) {
+    if (pathUnder(block.path, `$.data.${LINEAGE_KEY}`) || groupLabelSegments(block.path).includes(LINEAGE_KEY)) {
+      return { dropTopLevelLineage: true, dropMetadataLineage: false };
+    }
+    if ("value" in block && isPlainObject3(block.value)) {
+      const data = block.path === "$" ? block.value["data"] ?? null : block.value;
+      if (isPlainObject3(data) && LINEAGE_KEY in data) {
+        return { dropTopLevelLineage: true, dropMetadataLineage: false };
+      }
+    }
+  }
+  return null;
+}
+async function resolveBlockRedactionContext(storage, scope, collectedAt2, blocks) {
+  if (!servedLineageShaped(blocks)) {
+    return { dropTopLevelLineage: false, dropMetadataLineage: false };
+  }
+  const visible = visibleStampEvidence(blocks);
+  if (visible)
+    return visible;
+  try {
+    const envelope = await storage.readEnvelope(scope, collectedAt2);
+    if (!(LINEAGE_KEY in envelope.data)) {
+      return { dropTopLevelLineage: false, dropMetadataLineage: false };
+    }
+    return isBinaryEnvelope(envelope) ? { dropTopLevelLineage: false, dropMetadataLineage: true } : { dropTopLevelLineage: true, dropMetadataLineage: false };
+  } catch {
+    return FAIL_CLOSED_CONTEXT;
+  }
+}
+function redactedBlockPathPrefixes(ctx) {
+  return [
+    "$.data.$writtenBy",
+    "$.data.$lineage",
+    ...ctx.dropTopLevelLineage ? ["$.data.lineage"] : [],
+    ...ctx.dropMetadataLineage ? ["$.data.metadata.lineage"] : []
+  ];
+}
+function isRedactedBlockPath(path, ctx) {
+  return redactedBlockPathPrefixes(ctx).some((prefix) => path === prefix || path.startsWith(prefix) && /[.[{]/.test(path.charAt(prefix.length)));
+}
+function isPlainObject3(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isRedactedKeyName(parent, key, ctx) {
+  if (parent === "data") {
+    return key === "$writtenBy" || key === "$lineage" || ctx.dropTopLevelLineage && key === "lineage";
+  }
+  return ctx.dropMetadataLineage && key === "lineage";
+}
+function sanitizeGroupLabel(path, ctx) {
+  const match = /^(\$\.data(?:\.metadata)?)\.\{(.+):(.+)\}$/.exec(path);
+  if (!match)
+    return path;
+  const parent = match[1] === "$.data" ? "data" : "metadata";
+  const first = isRedactedKeyName(parent, match[2], ctx) ? "\u2026" : match[2];
+  const last2 = isRedactedKeyName(parent, match[3], ctx) ? "\u2026" : match[3];
+  return `${match[1]}.{${first}:${last2}}`;
+}
+function stripMetadataLineage(value, ctx) {
+  if (!ctx.dropMetadataLineage || !isPlainObject3(value["metadata"])) {
+    return value;
+  }
+  const { lineage: _metadataLineage, ...metadataRest } = value["metadata"];
+  if (Object.keys(metadataRest).length === 0) {
+    const { metadata: _emptied, ...rest } = value;
+    return rest;
+  }
+  return { ...value, metadata: metadataRest };
+}
+function stripDataLevelKeys(value, ctx) {
+  const { $writtenBy: _writtenBy, $lineage: _lineage, ...rest } = value;
+  let data = rest;
+  if (ctx.dropTopLevelLineage) {
+    const { lineage: _callerLineage, ...dataRest } = data;
+    data = dataRest;
+  }
+  return stripMetadataLineage(data, ctx);
+}
+function redactBlockValue(path, value, ctx) {
+  if (!isPlainObject3(value))
+    return value;
+  if (path === "$.data" || /^\$\.data\.\{.*\}$/.test(path)) {
+    return stripDataLevelKeys(value, ctx);
+  }
+  if (path === "$.data.metadata" || /^\$\.data\.metadata\.\{.*\}$/.test(path)) {
+    if (!ctx.dropMetadataLineage)
+      return value;
+    const { lineage: _metadataLineage, ...rest } = value;
+    return rest;
+  }
+  if (path === "$" && isPlainObject3(value["data"])) {
+    return { ...value, data: stripDataLevelKeys(value["data"], ctx) };
+  }
+  return value;
+}
+function redactBlockRefsForGrantee(blocks, ctx) {
+  return blocks.filter((block) => !isRedactedBlockPath(block.path, ctx)).map((block) => ({ ...block, path: sanitizeGroupLabel(block.path, ctx) }));
+}
+function redactBlockPayloadsForGrantee(blocks, ctx) {
+  return blocks.filter((block) => !isRedactedBlockPath(block.path, ctx)).flatMap((block) => {
+    const value = redactBlockValue(block.path, block.value, ctx);
+    if (isPlainObject3(block.value) && Object.keys(block.value).length > 0 && isPlainObject3(value) && Object.keys(value).length === 0) {
+      return [];
+    }
+    return [{ ...block, path: sanitizeGroupLabel(block.path, ctx), value }];
+  });
+}
 var McpDataReadError = class extends Error {
   status;
   body;
@@ -115887,7 +116232,11 @@ function createMcpDataReadClient(options) {
             userAgent
           });
         }
-        return { status: 200, ...result };
+        return isOwnerView(authResult) ? { status: 200, ...result } : {
+          status: 200,
+          ...result,
+          blocks: redactBlockPayloadsForGrantee(result.blocks, await resolveBlockRedactionContext(storage, scope, selectedEntry.collectedAt, result.blocks))
+        };
       } catch (err2) {
         if (err2 instanceof ProtocolError) {
           throw new McpDataReadError(err2.code, err2.toJSON());
@@ -115924,6 +116273,12 @@ function createMcpDataReadClient(options) {
       });
       const manifest = await storage.readBlockManifest(scope, selectedEntry.collectedAt);
       await writeReadAccessLog(request2, { scope, grantId, authResult });
+      if (manifest && !isOwnerView(authResult)) {
+        return {
+          ...manifest,
+          blocks: redactBlockRefsForGrantee(manifest.blocks, await resolveBlockRedactionContext(storage, scope, selectedEntry.collectedAt, manifest.blocks))
+        };
+      }
       return manifest;
     },
     async readRawScopeFile({ scope, grantId, at: at3, fileId, payment }) {
@@ -127072,7 +127427,7 @@ var Protocol = class {
     };
   }
 };
-function isPlainObject3(value) {
+function isPlainObject4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function mergeCapabilities(base, additional) {
@@ -127083,7 +127438,7 @@ function mergeCapabilities(base, additional) {
     if (addValue === void 0)
       continue;
     const baseValue = result[k10];
-    if (isPlainObject3(baseValue) && isPlainObject3(addValue)) {
+    if (isPlainObject4(baseValue) && isPlainObject4(addValue)) {
       result[k10] = { ...baseValue, ...addValue };
     } else {
       result[k10] = addValue;
@@ -130256,6 +130611,12 @@ function createBearerTokenPsLiteAuth(options) {
           reason: "No grantId in request"
         });
       }
+      if (input.grantId === "owner" || input.grantId === "policy-bypass") {
+        throw new GrantRequiredError({
+          reason: "Reserved grantId",
+          grantId: input.grantId
+        });
+      }
       return { grantId: input.grantId };
     }
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/personal-server-ts-server",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "description": "Hono HTTP server for the Vana Personal Server — routes, middleware, composition root",
   "license": "MIT",
   "repository": {
@@ -44,8 +44,8 @@
   },
   "dependencies": {
     "@hono/node-server": "^1.19.13",
-    "@opendatalabs/personal-server-ts-core": "1.13.0",
-    "@opendatalabs/personal-server-ts-lite": "1.13.0",
+    "@opendatalabs/personal-server-ts-core": "1.14.0",
+    "@opendatalabs/personal-server-ts-lite": "1.14.0",
     "@opendatalabs/vana-sdk": "3.14.0",
     "better-sqlite3": "^12.11.1",
     "hono": "^4.12.27",